feat(helm): add advanced values (#210)

Signed-off-by: Oliver Bähler <[email protected]>

Author: oliverbaehler

charts/sops-operator/README.md

@@ -61,6 +61,7 @@ The following Values are available for this chart.
 | args.extraArgs | list | `[]` | A list of extra arguments to add to the sops-operator |
 | args.logLevel | int | `4` | Log Level |
 | args.pprof | bool | `false` | Enable Profiling |
+| env | list | `[]` | Environment variables |
 | fullnameOverride | string | `""` |  |
 | image.pullPolicy | string | `"IfNotPresent"` | Set the image pull policy. |
 | image.registry | string | `"ghcr.io"` | Set the image registry |
@@ -70,7 +71,8 @@ The following Values are available for this chart.
 | livenessProbe | object | `{"httpGet":{"path":"/healthz","port":10080}}` | Configure the liveness probe using Deployment probe spec |
 | nameOverride | string | `""` |  |
 | nodeSelector | object | `{}` | Set the node selector |
-| podAnnotations | object | `{}` | Annotations to add |
+| podAnnotations | object | `{}` | Annotations to add to pod |
+| podLabels | object | `{}` | Annotations to add to pod |
 | podSecurityContext | object | `{"enabled":true,"seccompProfile":{"type":"RuntimeDefault"}}` | Set the securityContext |
 | priorityClassName | string | `""` | Set the priority class name of the Capsule pod |
 | rbac.enabled | bool | `true` | Enable bootstraping of RBAC resources |
@@ -85,6 +87,8 @@ The following Values are available for this chart.
 | serviceAccount.name | string | `""` | The name of the service account to use. |
 | tolerations | list | `[]` | Set list of tolerations |
 | topologySpreadConstraints | list | `[]` | Set topology spread constraints |
+| volumeMounts | list | `[{"mountPath":"/tmp","name":"sops-volume"}]` | VolumeMounts |
+| volumes | list | `[{"emptyDir":{"sizeLimit":"500Mi"},"name":"sops-volume"}]` | Volumes |
 
 ### Monitoring Parameters
 

charts/sops-operator/templates/deployment.yaml

@@ -17,6 +17,9 @@ spec:
       {{- end }}
       labels:
         {{- include "helm.selectorLabels" . | nindent 8 }}
+        {{- with .Values.podLabels }}
+          {{- toYaml . | nindent 8 }}
+        {{- end }}
     spec:
       {{- with .Values.imagePullSecrets }}
       imagePullSecrets:
@@ -26,10 +29,10 @@ spec:
       {{- if $.Values.podSecurityContext.enabled }}
       securityContext: {{- omit $.Values.podSecurityContext "enabled" | toYaml | nindent 8 }}
       {{- end }}
+      {{- with .Values.volumes }}
       volumes:
-        - name: sops-volume
-          emptyDir:
-            sizeLimit: 500Mi
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       containers:
         - name: {{ .Chart.Name }}
           {{- if $.Values.securityContext.enabled }}
@@ -48,6 +51,9 @@ spec:
             valueFrom:
               fieldRef:
                 fieldPath: metadata.namespace
+          {{- with .Values.env }}
+            {{- toYaml . | nindent 10 }}
+          {{- end }}
           ports:
           {{- if .Values.args.pprof }}
           - name: pprof
@@ -65,9 +71,10 @@ spec:
             {{- toYaml .Values.readinessProbe | nindent 12}}
           resources:
             {{- toYaml .Values.resources | nindent 12 }}
+          {{- with .Values.volumeMounts }}
           volumeMounts:
-          - mountPath: /tmp
-            name: sops-volume
+            {{- toYaml . | nindent 10 }}
+          {{- end }}
       priorityClassName: {{ .Values.priorityClassName }}
       {{- with .Values.nodeSelector }}
       nodeSelector:

charts/sops-operator/values.schema.json

@@ -44,6 +44,10 @@
                 }
             }
         },
+        "env": {
+            "description": "Environment variables",
+            "type": "array"
+        },
         "fullnameOverride": {
             "type": "string"
         },
@@ -364,7 +368,11 @@
             "type": "object"
         },
         "podAnnotations": {
-            "description": "Annotations to add",
+            "description": "Annotations to add to pod",
+            "type": "object"
+        },
+        "podLabels": {
+            "description": "Annotations to add to pod",
             "type": "object"
         },
         "podSecurityContext": {
@@ -494,6 +502,41 @@
         "topologySpreadConstraints": {
             "description": "Set topology spread constraints",
             "type": "array"
+        },
+        "volumeMounts": {
+            "description": "VolumeMounts",
+            "type": "array",
+            "items": {
+                "type": "object",
+                "properties": {
+                    "mountPath": {
+                        "type": "string"
+                    },
+                    "name": {
+                        "type": "string"
+                    }
+                }
+            }
+        },
+        "volumes": {
+            "description": "Volumes",
+            "type": "array",
+            "items": {
+                "type": "object",
+                "properties": {
+                    "emptyDir": {
+                        "type": "object",
+                        "properties": {
+                            "sizeLimit": {
+                                "type": "string"
+                            }
+                        }
+                    },
+                    "name": {
+                        "type": "string"
+                    }
+                }
+            }
         }
     }
 }

charts/sops-operator/values.yaml

@@ -109,7 +109,10 @@ serviceAccount:
    # -- The name of the service account to use.
   name: ""
 
-# -- Annotations to add
+# -- Annotations to add to pod
+podLabels: {}
+
+# -- Annotations to add to pod
 podAnnotations: {}
 
 # -- Set the securityContext
@@ -165,6 +168,20 @@ affinity: {}
 # -- Set topology spread constraints
 topologySpreadConstraints: []
 
+# -- Environment variables
+env: []
+
+# -- VolumeMounts
+volumeMounts:
+  - mountPath: /tmp
+    name: sops-volume
+
+# -- Volumes
+volumes:
+  - name: sops-volume
+    emptyDir:
+      sizeLimit: 500Mi
+
 # Monitoring Values
 monitoring:
   # -- Enable Monitoring of the Operator